Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/rRqz65pZZHIuPpuIpcFzrCjPQRs.roa
File: rRqz65pZZHIuPpuIpcFzrCjPQRs.roa (raw, json)
Hash identifier: YjY3bveeuRHWBvPQIIbMQLSDQTPhfcUIh+Cnr2BshRw=
Subject key identifier: AD:1A:B3:EB:9A:59:64:72:2E:3E:9B:88:A5:C1:73:AC:28:CF:41:1B
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 08FCAB11
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/rRqz65pZZHIuPpuIpcFzrCjPQRs.roa
Signing time: Wed 13 Apr 2022 08:49:53 +0000
ROA not before: Wed 13 Apr 2022 08:49:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 83.147.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150776593 (0x8fcab11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 13 08:49:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad1ab3eb9a5964722e3e9b88a5c173ac28cf411b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:f0:18:75:13:35:cb:87:11:51:ec:5e:8f:
fb:9e:36:5c:fe:12:23:c2:94:c7:57:ea:11:c8:01:
92:7d:37:60:03:73:36:52:90:bd:2d:c7:b1:ae:24:
4b:60:de:20:16:27:90:08:62:10:ac:02:6f:d1:0f:
df:49:72:0f:92:3c:7e:9d:39:c5:33:98:36:61:89:
55:73:bf:b6:f7:e2:75:3d:f0:f1:83:53:17:ac:c8:
8b:f9:0c:ff:d5:fb:63:06:dd:a3:ec:9a:a8:15:96:
e8:30:2b:04:27:28:2a:ff:69:ad:68:90:be:1c:a5:
8f:a3:67:e4:04:7f:99:d6:35:f0:a5:b2:57:8f:1d:
d3:46:c0:97:57:24:7e:e8:38:24:33:3c:53:ed:c3:
9a:6b:af:9a:7d:ea:9b:22:2b:aa:2a:59:0b:72:0d:
4a:d6:e0:24:f6:4f:21:0d:af:28:76:21:8c:d6:a1:
c1:f8:53:c3:8c:a0:71:6a:8f:86:b4:81:de:cd:a3:
7b:1a:ba:03:2f:3b:db:80:31:02:0c:50:5c:34:9f:
7d:68:6c:2a:29:13:45:8c:ec:5f:b6:27:b3:98:71:
3a:3f:2f:96:7a:c4:04:f9:17:73:73:c8:b8:a7:85:
8a:3a:f3:d1:e6:07:fe:61:d0:52:71:5f:36:9f:8a:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1A:B3:EB:9A:59:64:72:2E:3E:9B:88:A5:C1:73:AC:28:CF:41:1B
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/rRqz65pZZHIuPpuIpcFzrCjPQRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
Signature Algorithm: sha256WithRSAEncryption
21:97:6a:9e:da:fe:85:d3:8d:a1:f6:ad:64:8f:87:aa:9a:d6:
1c:79:a4:6d:5a:8e:a9:f7:14:14:6f:c6:02:1b:47:a9:25:59:
84:92:50:62:15:86:52:e5:ec:d0:aa:e5:43:f3:a5:27:ad:c2:
24:c6:21:9a:92:d6:59:b6:7a:fa:09:33:d3:02:dd:14:96:91:
67:1d:aa:69:6e:8a:af:34:05:27:a2:5c:89:96:23:c8:21:1d:
67:9d:1b:e0:fa:de:74:a9:be:bf:52:79:6c:69:f1:1c:41:26:
d5:4d:05:d3:00:c0:20:6f:14:63:a8:e2:ce:04:a2:9a:66:ac:
47:5e:92:52:64:39:1c:f9:c8:53:83:f0:20:70:fe:4f:0b:d7:
d0:e7:f3:1a:58:f7:9f:98:db:19:e6:dd:40:f9:31:67:43:9e:
cb:ae:b8:0b:6f:62:33:77:e7:8e:6c:13:da:34:44:b9:cf:01:
37:34:36:1c:36:52:d4:bf:36:0a:92:31:85:94:43:6c:d1:24:
66:f5:42:a6:0f:06:2d:e6:a5:07:2c:e1:01:f6:72:5a:b8:7c:
fb:b7:f7:d3:69:30:a2:9b:1d:58:dc:6e:b8:fe:51:eb:43:d3:
20:72:56:42:98:5a:86:2a:b4:b7:3d:83:de:ca:f7:62:1e:2a:
88:53:06:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:20 2024 by rpki-client on console-ams.rpki-client.org